Last updated: September 2026
Who we are
Private Game is operated by NV-IT, Belgium (VAT BE 1012.827.973), the data controller. Contact: [email protected].
What the app is
An adult (18+) intimate card game for couples, delivered as a website and installable PWA. There is no native app-store version.
Game data — local and synced
Your profile (display name, anatomy, comfort settings, facets) and session history (cards drawn, embers, feedback) are saved in your browser (IndexedDB) so you can use the app offline. When you sign in, your profile and session history also sync to our database (Cloudflare D1) tied to your account, so they follow you across devices; when signed out, they stay only on this device. Other game data — sealed wishes, intimacy-map progress, seen-card history and preferences — remains in your browser in either case and is never transmitted to us. You can erase device data anytime via “Delete all data” in Settings or by clearing browser storage. Signed-in users can permanently delete their account and its server-side data anytime via “Delete account” in Settings; if you can no longer sign in, you can request deletion at private-game.app/delete-account.
Account & authentication (optional)
You can use the free tier without an account. If you sign in (Google or email, via Firebase Authentication, a Google service), we process your email address and a user identifier (Firebase UID) so your purchases and entitlements follow you across devices. Sign-in tokens are verified server-side.
Purchases & entitlements
One-time purchases (the full-game unlock and optional expansion packs — there is no subscription) are processed through RevenueCat, our payment and entitlement-management processor. When you purchase, your email and user ID are shared with RevenueCat, and a record (product, amount, currency, transaction ID, timestamp, status) is stored in our database (Cloudflare D1) tied to your account so we can grant, restore and support your purchase. Coupon redemptions are likewise recorded against your account.
Referral attribution
If you arrive via a partner referral link or code, we store that code linked to your account on first visit. If you later purchase, we record a conversion (code, your user ID, product, amount, timestamp) so we can reconcile and pay referral partners. No additional personal data is collected for this.
Optional email updates
If you opt in (offered after a first completed free session), we store your email address to send occasional product updates. EU users complete a double opt-in (a confirmation link that expires after 30 days). We send at most 4 emails per year, never with explicit subject lines, and every email has one-click unsubscribe that takes effect immediately. Email delivery is performed by Resend, our email processor. We keep your address until you unsubscribe.
Feedback & product analytics
Optional end-of-session feedback (a sentiment, tags and an optional short note) is stored server-side to improve the game. Detailed gameplay statistics and Google Analytics / Google Tag Manager are collected only with your consent, given via the cookie banner; you can decline or change this at any time. Without consent, none of that is collected and no analytics cookies are set — see “Anonymous usage counts” below for the one thing we do count without consent.
Anonymous usage counts
Separately from the above, we keep simple anonymous counts of how the app is used — for example how many sessions began on a given day, how often a paywall was shown, or how many cards were completed at each intensity level. These are totals and nothing else: no identifier, no cookie, no device or session ID, and no time of day, only the date. Nothing in them can be traced back to you or to any single visit, and each count is folded into a running total the moment it arrives, so individual contributions cannot be separated out again afterwards. Because these figures are anonymous rather than personal data, they are collected without consent — but you can still switch them off at any time under Settings → Privacy.
Abuse prevention
To stop automated abuse of endpoints that don’t require sign-in (for example invite-code lookups and anonymous analytics ingestion), we process your IP address transiently to apply rate limits. It is never stored in readable form — only as a keyed cryptographic hash used to group requests from the same address, and that hash cannot be reverse-engineered back to your IP.
Hosting & sub-processors
Infrastructure is provided by Cloudflare (Pages, Workers, D1 database, KV). Our sub-processors are: Google/Firebase (authentication), RevenueCat (payments and entitlements), Resend (email), Google (analytics, consent-based) and Cloudflare (hosting and edge). These providers may process data outside the EU under appropriate safeguards such as the EU Standard Contractual Clauses.
External links
Some features (such as Position Roulette) may link to external sites — for example badgirlsbible.com — for reference. Those sites have their own privacy policies which we do not control.
Administration
Administrative tooling is restricted via Cloudflare Access (Zero Trust). Admin operational data contains no additional user game content.
Your rights (GDPR)
You may request access, rectification, erasure, restriction and portability of your data, and you may object to or withdraw consent at any time, by emailing [email protected]. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).
Retention
On-device data is kept until you delete it. Account and purchase records are kept while your account or entitlements are active and as required by law (for example accounting and tax records). When you delete your account, we remove your profile, capability settings, sessions you hosted, seen-card history, entitlements and email subscription. Purchase, checkout, coupon and referral-payout records — including the underlying payment-provider event logs — are kept for a further 7 years, as Belgian accounting law requires, with your identifier replaced everywhere it appears so they can no longer be traced back to you. End-of-session feedback is kept in the same pseudonymised way, though it still carries your free-text note and a device identifier. A session hosted by someone else that you took part in is not removed by your own deletion. Our payment processor, RevenueCat, separately retains its own record of your purchase history under its own policy. An email subscription is kept until you unsubscribe. Referral conversions are kept as needed for partner payout and accounting.
Children
Private Game is strictly for adults aged 18 and over.
Changes
We may update this policy; material changes will be reflected in the date above.
Reference version
This policy is published in English, Dutch and French. The English version is the reference version; in case of discrepancy it prevails, without prejudice to mandatory consumer protections in your country of residence.